According to one embodiment of the invention, a computerized method for reducing the false alarm rate of network intrusion detection systems includes receiving, from a network intrusion detection sensor, one or more data packets associated with an alarm indicative of a potential attack on a target host...http://www.google.ca/patents/US20050086522?utm_source=gb-gplus-sharePatent US20050086522 - Method and system for reducing the false alarm rate of network intrusion detection systems
